$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer File: 7b407ffa-7fa7-4255-8a63-77381712e9e8.cer (raw, json) Hash identifier: cTBBmKa2/NbvXQLyFS6pONK9aQgVfQbZj8pIea9+7/E= Subject key identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584940E7CE4B82A05B459BC3C0C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Mar 2025 18:52:37 +0000 Certificate not after: Wed 23 Jun 2027 18:52:37 +0000 Subordinate resources: AS: 21827 AS: 33111 AS: 397318 AS: 397650 IP: 64.136.96.0/23 IP: 192.35.85.0/24 IP: 192.52.228.0/24 IP: 192.111.8.0/21 IP: 199.71.142.0/23 IP: 2620:13d:d000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:e7:ce:4b:82:a0:5b:45:9b:c3:c0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 20 18:52:37 2025 GMT Not After : Jun 23 18:52:37 2027 GMT Subject: CN=7b407ffa-7fa7-4255-8a63-77381712e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:dc:6d:20:62:19:94:fe:5b:b8:9a:69:ed: 33:4a:35:1c:c4:37:5d:35:f4:a8:32:42:53:9d:eb: c2:96:70:25:c5:07:55:fa:41:98:36:c7:50:a0:2e: cb:bf:03:ce:f5:d1:f2:ea:26:5e:e9:0f:43:9b:a0: e9:47:32:75:c2:ec:6c:19:99:e6:c4:ae:be:8f:43: 35:04:90:85:fa:25:8f:27:22:b4:0f:b1:67:1e:ad: 81:c2:c9:f5:06:1b:57:60:35:35:d6:77:22:a9:c5: 44:a7:dd:7b:d8:46:74:6b:6a:7c:86:c0:7c:8a:3c: 70:9e:01:11:72:cf:dc:54:2b:3b:4c:46:d8:54:e6: 29:df:f7:eb:27:6f:15:98:c0:4e:49:49:8c:0d:cf: 0c:b1:90:b1:5a:e5:23:fd:cc:52:70:f6:ca:df:1c: 73:e1:68:33:6e:97:e3:2d:0f:cf:82:1e:74:63:e0: 1d:fb:36:8f:3d:85:e3:87:22:43:4d:d0:e1:0f:c2: d3:12:9a:67:91:fb:78:f9:71:ae:3b:78:b2:dc:58: 14:1a:fc:5e:a0:dc:a0:3a:12:95:4e:cd:48:ec:80: fd:2a:17:36:b4:29:15:1c:ba:f0:42:67:ca:9b:ae: c3:c7:9c:d1:09:92:db:66:87:cd:eb:ab:a3:91:66: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.136.96.0/23 192.35.85.0/24 192.52.228.0/24 192.111.8.0/21 199.71.142.0/23 IPv6: 2620:13d:d000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21827 33111 397318 397650 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1a:cc:5a:5d:31:f6:e4:49:1e:d4:10:e3:8c:98:3b:8c:13: d2:95:6f:79:49:e7:f3:6a:3c:ec:f8:3c:2f:da:ce:f3:27:9e: 6a:84:2a:39:a3:4d:6a:c1:e5:95:ae:3b:1f:c8:e1:2e:00:81: c8:12:85:fd:43:f7:ce:0e:e1:4c:f2:c1:4d:b4:35:9d:1f:b1: c0:43:b1:59:c7:67:3c:79:d9:1a:27:7a:a6:17:8f:69:f7:d9: de:0c:0a:90:60:3b:b4:21:4c:f4:35:89:23:02:4c:f6:bf:a8: 0d:75:c9:83:a0:39:f8:95:a3:c8:9a:be:1d:87:98:7d:4b:e3: 28:a1:68:ca:60:f0:1a:5b:6e:00:ea:42:50:fd:f7:dc:cc:30: 57:39:63:93:d0:d2:c8:de:59:2a:8b:cb:42:c4:e4:91:ac:00: 03:79:0b:19:6b:cf:9e:00:61:f9:77:ca:0d:da:2c:84:5c:d6: de:72:09:4a:46:a7:8d:15:f2:cb:3e:1d:59:97:1f:13:5d:ba: 25:66:e4:1b:b5:b7:21:2e:28:8b:33:a6:df:7e:51:a4:4f:a3: a6:5b:40:90:60:47:17:81:49:cd:40:40:d2:a5:94:71:39:68: 8b:84:f9:15:e5:4b:01:00:9b:c1:40:a3:c7:25:bd:22:7d:32: f0:f4:d9:33 -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgIUAQ0Mn0MoWElA585LgqBbRZvDwMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMyMDE4NTIzN1oXDTI3MDYyMzE4NTIzN1owLzEtMCsGA1UEAxMk N2I0MDdmZmEtN2ZhNy00MjU1LThhNjMtNzczODE3MTJlOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uDcbSBiGZT+W7iaae0zSjUcxDddNfSoMkJT nevClnAlxQdV+kGYNsdQoC7LvwPO9dHy6iZe6Q9Dm6DpRzJ1wuxsGZnmxK6+j0M1 BJCF+iWPJyK0D7FnHq2Bwsn1BhtXYDU11nciqcVEp9172EZ0a2p8hsB8ijxwngER cs/cVCs7TEbYVOYp3/frJ28VmMBOSUmMDc8MsZCxWuUj/cxScPbK3xxz4Wgzbpfj LQ/Pgh50Y+Ad+zaPPYXjhyJDTdDhD8LTEppnkft4+XGuO3iy3FgUGvxeoNygOhKV Ts1I7ID9Khc2tCkVHLrwQmfKm67Dx5zRCZLbZofN66ujkWbi8wIDAQABo4IEUTCC BE0wHQYDVR0OBBYEFMJzzXJBGwQwm3v0qEFl/kaAh2IhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 YjQwN2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4MTcxMmU5ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdiNDA3ZmZhLTdmYTctNDI1NS04 YTYzLTc3MzgxNzEyZTllOC83YjQwN2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4MTcx MmU5ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAFAiGADBADAI1UDBADANOQDBAPAbwgDBAHHR44w DgQCAAIwCAMGACYgAT3QMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAlVDAgMAgVcC AwYQBgIDBhFSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH0azFpdMfbkSR7UEOOMmDuME9KVb3lJ5/NqPOz4 PC/azvMnnmqEKjmjTWrB5ZWuOx/I4S4AgcgShf1D984O4UzywU20NZ0fscBDsVnH Zzx52RoneqYXj2n32d4MCpBgO7QhTPQ1iSMCTPa/qA11yYOgOfiVo8iavh2HmH1L 4yihaMpg8BpbbgDqQlD999zMMFc5Y5PQ0sjeWSqLy0LE5JGsAAN5Cxlrz54AYfl3 yg3aLIRc1t5yCUpGp40V8ss+HVmXHxNduiVm5Bu1tyEuKIszpt9+UaRPo6ZbQJBg RxeBSc1AQNKllHE5aIuE+RXlSwEAm8FAo8clvSJ9MvD02TM= -----END CERTIFICATE-----Generated at Sat Apr 26 22:49:11 2025 by rpki-client